What is the action for newly updated protections which is set in Staging Mode?

Staging Mode is a feature designed to help administrators safely evaluate new and updated IPS protections without causing service disruptions from potential false positives. When Staging Mode is enabled for an IPS profile, any newly downloaded or modified protections are automatically set to the 'Detect' action for a specified period. This allows administrators to monitor the logs generated by these new protections and assess their impact on the network before changing their action to 'Prevent'.

B. Prevent: Setting new protections to 'Prevent' immediately is the opposite of the Staging Mode's purpose, as it could block legitimate traffic without a review period.

C. Inactive: Setting protections to 'Inactive' would provide no information about their potential impact, defeating the purpose of the evaluation period.

D. Ask: The 'Ask' action is not a standard, automated setting for protections in Staging Mode; the process is designed to be automatic ('Detect') for a defined time.

Check Point. (2023). R81.20 IPS Administration Guide. Page 50, "IPS Updates in Staging Mode". The guide explicitly states, "When you enable Staging, new and updated protections are set to the Detect action for the specified period."